1. Who We Are
Party Card is a wedding invitation and guest management platform operated from France. For privacy questions, contact us at privacy@party-card.com.
2. What Data We Collect
- Account data: Email address, name (via Google/email sign-in).
- Invitation content: Partner names, event date, venue, schedule, photos, music.
- Guest RSVP data: Guest name, attendance status, dietary preferences, optional message.
- Guest uploads: Photos and videos uploaded via QR code. Includes uploader name and optional caption.
- Technical data: IP address, browser type, timestamps for security. We do not use third-party analytics trackers.
3. Why We Collect It
- To provide the service: Creating invitations, managing guests, storing photos (contract performance).
- To send emails: Invitation emails, RSVP confirmations, reminders (legitimate interest + consent).
- To prevent abuse: Rate limiting, upload moderation, security logs (legitimate interest).
4. Who Has Access
- The couple — Full access to their invitation data, guest list, and uploads.
- Guests — Can see the invitation (if they have the link), the gallery (if enabled), and their own RSVP.
- Service providers: Vercel (hosting), Supabase (storage), Resend (email). Data processed under standard agreements.
- No one else. We do not sell or share data with advertisers or third parties.
5. Where Data Is Stored
Data is stored on servers in the EU and US (Vercel, Supabase). Transfers to the US are covered by standard contractual clauses and the EU-US Data Privacy Framework.
6. How Long We Keep It
Invitation content and guest data are retained for 12 months after your event date by default. You can change this in your dashboard. You can delete individual files, guests, or your entire event at any time. Account data is kept until you delete your account.
7. Your Rights (GDPR)
- Access your personal data.
- Rectify inaccurate data.
- Delete your data ("right to be forgotten").
- Port your data (export in standard format).
- Object to processing based on legitimate interest.
- Complaint: Lodge with CNIL (France).
Email privacy@party-card.com to exercise any right. Response within 30 days. Deletion propagates within 72 hours.
8. Cookies
We use only essential cookies for authentication. No advertising or analytics cookies.
9. Security
HTTPS everywhere. Uploads default to private (approval required). Guest access via unique tokens + optional passcodes. No system is 100% secure, but we take reasonable measures.